Where Them
Logs App
WTLA-01

Wazuh Agent

1 log location · Linux

Wazuh, Inc. · Vendor documentation

Where Wazuh Agent keeps its logs

Wazuh Agent logs to /var/ossec/logs/ossec.log on Linux.

Paths are printed exactly as Wazuh Agent writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.

Finding your way around Linux.

Wazuh Agent log file locations - Linux · Where Them Logs App